curl --request POST \
  --url https://rest.yafacture.com/timbrado/borrador/{borradorId} \
  --header 'x-api-key: <api-key>'

{
  "message": "Forbidden resource",
  "error": "Forbidden",
  "statusCode": 403
}